I’m adding a mechanism that performs validation after rendering a page. Whenever a validation error occurs, the errors are reported in the server log and the page is served with a js popup with the validation errors in it. And most important: the transaction will be rolled back, and invalid entities are not saved.

This might break pages where data-validation should have failed in the first place, but never did because of the lack of checking.